Archive · 6 Nov 2025
Nevada Cyberattack Started in May, Discovered in August, Report Reveals
Imagine a computer virus that locks up important files on a computer, like a secret code that only the bad guy knows.
In Nevada, someone accidentally let this virus into the state's computers way back in May.
The virus quietly set up shop and waited.
It wasn't until August that the people in charge realized something was wrong.
This virus made it hard for people to get their driver's licenses and for employers to hire new people.
It took a long time to fix, almost a whole month!
Thankfully, the state didn't have to pay any money to the bad guys to get their computers working again.
The state is now trying to be more careful so this doesn't happen again, but some experts say they should have been using these safety measures already.
A ransomware cyberattack in Nevada began as early as May but was only discovered in August.
The attack cost at least $1.5 million to recover, including overtime wages and contractor fees.
State services were disrupted, affecting driver's licenses and employer background checks.
Nevada officials confirmed that no ransom was paid to the unidentified attackers.
The state is implementing new security measures, though experts note these are long-standing best practices.
- Who
- State of Nevada employees and residents
- What
- A massive ransomware cyberattack that disrupted state services and delayed driver's licenses and background checks.
- When
- The attack began in May, was discovered in August, and took nearly a month to fully restore services.
- Where
- Nevada
- Why
- A state employee accidentally downloaded malicious software disguised as a system administration tool.
Government Perspective
Expert Perspective
Cost of Recovery
Government Perspective
Governor Lombardo stated the state recovered quickly and without paying criminals, highlighting disciplined planning and talented public servants.
Expert Perspective
Cybersecurity experts like Cameron Call suggest the reported $1.5 million cost might not fully account for the economic impact of the extended service disruption.
Preparedness and Recommendations
Government Perspective
The after-action report outlines steps and recommendations for future protection, implying a proactive approach post-incident.
Expert Perspective
Experts like Cameron Call note that the recommended security measures are standard best practices that the state should have implemented years prior.
- Attack Type
- Ransomware
- Start Date (Estimated)
- May
- Discovery Date
- August
- Total Recovery Cost
- At least $1.5 million
- Direct Overtime Wages
- $211,000 (4,212 hours)
- Contractor Costs
- $1.3 million (covered by cyber insurance)
- Ransom Paid
- No
- Attacker Identified
- No